Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/HoMMUDHAVWqEdmNy9qpQLACWCs4.roa
File: HoMMUDHAVWqEdmNy9qpQLACWCs4.roa (raw, json)
Hash identifier: DWd+Jj+OKp+iWh0PRsMEtJeGjUxgjAyn+RlcX+drmnQ=
Subject key identifier: 1E:83:0C:50:31:C0:55:6A:84:76:63:72:F6:AA:50:2C:00:96:0A:CE
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 01954872D48428F946F80EBA42C774643BDB
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/HoMMUDHAVWqEdmNy9qpQLACWCs4.roa
Signing time: Thu 27 Feb 2025 17:27:19 +0000
ROA not before: Thu 27 Feb 2025 17:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 212.102.227.0/24 maxlen: 24
212.102.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Mar 2025 11:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:48:72:d4:84:28:f9:46:f8:0e:ba:42:c7:74:64:3b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Feb 27 17:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e830c5031c0556a84766372f6aa502c00960ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:0d:79:89:4a:02:38:25:5a:d2:09:2c:e9:
02:d9:90:67:23:9b:89:2f:55:a3:41:a4:ca:a6:f0:
6b:89:04:bf:56:0d:d0:ad:0c:68:5e:47:0e:77:41:
c2:f4:3a:ea:ac:79:a4:35:e1:c8:a9:90:6c:51:4d:
e7:3d:4f:37:26:99:e9:4a:25:e0:51:ef:0b:00:46:
8c:86:3b:f3:69:fb:0d:2d:3c:13:16:b9:d4:98:95:
fe:2f:4d:4d:61:ab:dd:0c:d6:e3:7f:3b:bd:2e:9f:
f1:f2:5c:cf:0c:b5:bc:4a:7d:07:b2:8e:95:f1:f0:
84:f6:4a:3d:6b:be:e6:bc:13:33:50:f3:a4:2c:aa:
05:d9:18:36:0e:16:53:ea:80:57:1c:dc:23:6e:43:
da:99:36:ba:b8:ba:23:0b:8a:d5:fe:21:23:62:5b:
ee:fc:a9:06:08:65:11:d9:1c:bd:89:b4:31:25:02:
09:c8:27:ec:fe:e6:00:29:98:e5:28:6f:fd:dd:d0:
15:3e:56:6c:f8:68:25:24:5a:17:97:f1:2e:28:51:
a2:c0:fc:8c:89:90:cc:2a:ad:b4:03:fc:46:d8:97:
9c:a0:a1:61:52:bf:95:5d:40:ab:69:15:fd:86:d1:
ea:8e:4e:f7:9d:af:65:f6:75:9f:bf:48:a8:14:95:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:83:0C:50:31:C0:55:6A:84:76:63:72:F6:AA:50:2C:00:96:0A:CE
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/HoMMUDHAVWqEdmNy9qpQLACWCs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.227.0-212.102.228.255
Signature Algorithm: sha256WithRSAEncryption
a2:31:84:53:bc:57:fc:79:a7:18:65:e2:66:de:38:aa:f8:94:
e0:92:37:bd:92:c6:15:e8:bc:fa:7c:43:86:d3:54:24:ce:57:
b7:41:a6:f3:40:95:8a:ef:c2:12:e1:a2:23:54:d9:47:ab:f2:
df:30:8b:83:d2:f9:9e:b6:d8:ba:be:66:c2:b2:e9:7f:1b:fb:
52:be:51:ce:57:7e:0d:09:c8:b8:47:b1:5e:3a:ba:2a:25:39:
37:8b:58:68:1a:d0:af:21:8b:76:1e:8e:f1:96:0b:ee:60:e9:
a4:34:51:e0:91:09:3c:66:e3:a8:26:05:48:eb:35:55:e3:f3:
aa:55:15:a1:71:72:8c:60:f1:96:81:fe:76:03:0b:67:9b:71:
4e:1d:9a:ac:26:cb:4b:15:47:d9:8a:0e:a4:2c:86:e8:b5:dd:
1b:1b:cc:4a:be:b0:78:e6:6a:db:48:b4:a2:a1:20:12:df:93:
53:42:d0:a6:b4:1c:34:a2:91:4d:d0:8e:61:ca:03:5a:49:e9:
73:1a:5f:99:39:30:1c:5a:d7:ab:3b:3c:b5:ae:94:fe:34:43:
d3:77:8e:4b:df:87:77:aa:fb:58:9f:b1:6f:97:32:1f:87:5f:
96:91:dc:fd:fe:16:2b:71:f4:94:75:8f:9c:05:c1:ef:ee:05:
d5:1e:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:55:44 2025 by rpki-client